CVE-2023-22839: F5 BIG-IP 10000s Firmware
High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.
On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all version of 13.1.x, when a DNS profile with the Rapid Response Mode setting enabled is configured on a virtual server with hardware SYN cookies enabled, undisclosed requests cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected products
- F5 BIG-IP 10000s Firmware: affected versions not specified
- F5 BIG-IP 10200v-SSL Firmware: affected versions not specified
- F5 BIG-IP 10200v Firmware: affected versions not specified
- F5 BIG-IP 12000 Firmware: affected versions not specified
- F5 BIG-IP 5000s Firmware: affected versions not specified
- F5 BIG-IP 5200v-SSL Firmware: affected versions not specified
- F5 BIG-IP 5200v Firmware: affected versions not specified
- F5 BIG-IP 7000s Firmware: affected versions not specified
- F5 BIG-IP 7200v-SSL Firmware: affected versions not specified
- F5 BIG-IP 7200v Firmware: affected versions not specified
- F5 BIG-IP Domain Name System: from 13.1.0, up to and including 13.1.5; from 14.1.0, before 14.1.5.3 (fixed in 14.1.5.3); from 15.1.0, before 15.1.7 (fixed in 15.1.7); from 16.1.0, before 16.1.3.3 (fixed in 16.1.3.3); from 17.0.0, before 17.0.0.2 (fixed in 17.0.0.2)
- F5 BIG-IP i10600 Firmware: affected versions not specified
- F5 BIG-IP i10800 Firmware: affected versions not specified
- F5 BIG-IP i11600 Firmware: affected versions not specified
- F5 BIG-IP i11800 Firmware: affected versions not specified
- F5 BIG-IP i15600 Firmware: affected versions not specified
- F5 BIG-IP i15800 Firmware: affected versions not specified
- F5 BIG-IP i5600 Firmware: affected versions not specified
- F5 BIG-IP i5800 Firmware: affected versions not specified
- F5 BIG-IP i7600 Firmware: affected versions not specified
- F5 BIG-IP i7800 Firmware: affected versions not specified
- F5 BIG-IP Local Traffic Manager: from 13.1.0, up to and including 13.1.5; from 14.1.0, before 14.1.5.3 (fixed in 14.1.5.3); from 15.1.0, before 15.1.7 (fixed in 15.1.7); from 16.1.0, before 16.1.3.3 (fixed in 16.1.3.3); from 17.0.0, before 17.0.0.2 (fixed in 17.0.0.2)
- F5 r10600 Firmware: affected versions not specified
- F5 r10800 Firmware: affected versions not specified
- F5 r10900 Firmware: affected versions not specified
- and 9 more
Published 2023-02-01. Last modified 2026-06-17.